下载zabbix rpm包报错ssl证书过期

问题我是在安装zabbix时遇到的

我在配置zabbix rpm源的时候，从官网获取了下载链接

[root@zabbix-server ~]# rpm -Uvh https://repo.zabbix.com/zabbix/5.0/rhel/7/x86_64/zabbix-release-5.0-1.el7.noarch.rpm

执行命令后报错

It was impossible to connect to the CentOS servers. This could mean a connectivity issue in your environment, such as the requirement to configure a proxy, or a transparent proxy that tampers with TLS security, or an incorrect system clock. You can try to solve this issue by using the instructions on https://wiki.centos.org/yum-errors If above article doesn't help to resolve this issue please use https://bugs.centos.org/. One of the configured repositories failed (Zabbix Official Repository - x86_64), and yum doesn't have enough cached data to continue. At this point the only safe thing yum can do is fail. There are a few ways to work "fix" this: 1. Contact the upstream for the repository and get them to fix the problem. 2. Reconfigure the baseurl/etc. for the repository, to point to a working upstream. This is most often useful if you are using a newer distribution release than is supported by the repository (and the packages for the previous distribution release still work). 3. Run the command with the repository temporarily disabled yum --disablerepo=zabbix ... 4. Disable the repository permanently, so yum won't use it by default. Yum will then just ignore the repository until you permanently enable it again or use --enablerepo for temporary usage: yum-config-manager --disable zabbix or subscription-manager repos --disable=zabbix 5. Configure the failing repository to be skipped, if it is unavailable. Note that yum will try to contact the repo. when it runs most commands, so will have to try and fail each time (and thus. yum will be be much slower). If it is a very temporary problem though, this is often a nice compromise: yum-config-manager --save --setopt=zabbix.skip_if_unavailable=true failure: repodata/repomd.xml from zabbix: [Errno 256] No more mirrors to try. https://repo.zabbix.com/zabbix/6.4/rhel/7/x86_64/repodata/repomd.xml: [Errno 14] curl#60 - "Peer's Certificate has expired."

翻译之后显示连接到Zabbix官方软件包存储库时遇到了SSL证书过期的问题。这可能是由于存储库的SSL证书已经过期而导致的。

百度查询之后找到解决方法：

curl -k -O https://repo.zabbix.com/zabbix/6.4/rhel/7/x86_64/zabbix-release-6.4-1.el7.noarch.rpm

-k强制下载，然后，使用rpm命令来安装该软件包：

rpm -ivh zabbix-release-6.4-1.el7.noarch.rpm

下载确实可以下载了，安装时又显示了同样的错误

怀疑下载流程有问题，去官网查询流程：

流程显示没有问题。

后来在仔细查看翻译文件，找到了centos给出的方案：

or a transparent proxy that tampers with TLS security, or an incorrect system clock.

翻译过来是：

或者篡改TLS安全性的透明代理，或者不正确的系统时钟。

DATE查看系统时间，发现确实不对，同步时间：

sudo yum install ntpdate
sudo ntpdate cn.pool.ntp.org

再次查看，时间正确了。

再次安装：

问题解决，安装成功。